Severity: important Affected versions:
- Apache HTTP Server 2.4.30 through 2.4.70 Description: NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69. Credit: hexb1n, Yang Song, and JiaSheng He of 360 Vulnerability Research Institute, working with 360 TuLongFeng. (finder) Lucian Nitescu (finder) Bartlomiej Dmitruk at striga.ai (finder) References: https://httpd.apache.org/security/vulnerabilities_24.html https://httpd.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-106023 Timeline: 2026-09-29: reported
